Demo: Exploiting a Blind XSS & Second Order SQL Injection

Robert Abela - Thu, 11 May 2017 -

During this Demo, our CEO Ferruh Mavituna explains in detail what Blind XSS and Second Order SQL Injection vulnerabilities are and shows how malicious hackers can exploit them.

Your Information will be kept private.

Demo: Exploiting a Blind XSS & Second Order SQL Injection

This is an archive post from the Netsparker (now Invicti) blog. Please note that the content may not reflect current product names and features in the Invicti offering.

Watch the Tech Segment from Paul’s Security Weekly show #512 for a live demo of how to exploit a Blind Cross-site Scripting (XSS) and a Second Order SQL Injection vulnerability.

The demos were delivered by our CEO Ferruh Mavituna. During the demos, Ferruh also explains all the technical details of how these vulnerabilities work and demonstrates how malicious hackers can exploit them to exfiltrate sensitive data from the vulnerable web application.

Ferruh Mavituna is Interviewed About Netsparker by Help Net Security

Ferruh Explains Why Web Application Security Automation is a Must in Enterprises

Watch episode #98 of Enterprise Security Weekly, in which Ferruh Mavituna, our CEO, talks about penetration testing versus dynamic scanning tools, such as Netsparker; the differences between Waterfall and Agile methodologies; addressing vulnerabilities early in the SDLC; static integration; accuracy and trust; bug bounties; and workflow management.

Ferruh Mavituna Interviewed About Web App Security by Byron Acohido

Ferruh Mavituna is interviewed about the growing success of Netsparker, and how Netsparker has anticipated and adapted to some of the largest trends in the digital transformation. Netsparker's focus on web apps, cloud based environments, and scanning to scale, all contribute to its success, as well as its core focus on automation and accuracy.

Ferruh Mavituna Is Interviewed About Netsparker at RSA Conference 2018

Ferruh Mavituna chatted with John Dasher at the RSA Conference 2018 about Netsparker's powerful ability as a tool to find web application security vulnerabilities accurately, quickly, early, and automatically, in a way that brings scalability, visibility and connectivity to the entire security scanning process, from planning to product deployment.

Demo: Exploiting a Blind XSS & Second Order SQL Injection

Related Articles

Ferruh Mavituna is Interviewed About Netsparker by Help Net Security

Ferruh Explains Why Web Application Security Automation is a Must in Enterprises

Ferruh Mavituna Interviewed About Web App Security by Byron Acohido

Ferruh Mavituna Is Interviewed About Netsparker at RSA Conference 2018